To get in touch about speaking at your event, email [email protected]
Media Packet · Press
853 items
853 items
Press
A Cybernews article examines the ongoing legal risks that ethical hackers encounter despite the expansion of bug bounty programs. Casey Ellis discusses how the disconnect between security research and legal frameworks leaves researchers vulnerable to prosecution and advocates for clearer protections.
Press
VentureBeat published Casey Ellis's analysis of Ukraine's volunteer IT Army formed in response to the Russian invasion. Ellis examines the ethical tensions and long-term consequences of state-endorsed hacktivism, arguing that while Ukraine's defensive response is justified, the precedent raises complex questions about accountability and international norms.
Press
An SC Media report details research showing that supply chain integration problems are costing 38 percent of companies $500,000 or more annually. Casey Ellis contributed to the findings on the financial impact of supply chain security gaps and integration challenges affecting enterprise operations.
Press
VentureBeat published an analysis of escalating cyber attacks during the Russian invasion of Ukraine, examining the involvement of hacktivist groups and distributed denial-of-service operations. Casey Ellis provided commentary on the nature and scope of the cyber conflict unfolding alongside conventional military operations.
Press
Threatpost published an article examining how the Russia-Ukraine conflict is fracturing the cybercriminal underground and forcing ransomware groups to take geopolitical stances. Casey Ellis is quoted discussing the implications of these divisions for threat intelligence and the evolving landscape of organized cybercrime.
Press
TheStreet published an article titled "How to Avoid Being Hacked By the Russians" offering cybersecurity advice and best practices for individuals and businesses. Casey Ellis contributed guidance on protecting against potential Russian-sponsored cyber threats.
Press
A TheStreet article from February 2022 reports on a major data breach at Nvidia in which the LAPSUS$ hacking group claimed to have stolen approximately one terabyte of proprietary data from the chipmaker. Casey Ellis commented on the incident and the broader implications of the breach for corporate security practices.
Press
NBC Bay Area published a local news segment offering practical tips for protecting personal information and devices from cyberattacks. Casey Ellis contributed expert guidance on cybersecurity precautions that individuals can implement to reduce their vulnerability to attacks.
Press
Security Boulevard published an article in February 2022 examining the absence of widespread cybercriminal exploitation tied to Russia-Ukraine tensions at that time. Casey Ellis provided analysis on threat actor behavior and the evolving security landscape during the geopolitical crisis.
Press
A CSO article from February 2022 examines how cryptocurrency and Web3 companies are offering substantial bug bounty rewards to attract security researchers. Casey Ellis comments on the competitive dynamics of these high-value bounties and their impact on talent recruitment in the emerging blockchain security sector.
Press
PortSwigger Daily Swig reported on New Zealand's mandate requiring federal agencies to establish formal vulnerability reporting processes for security researchers. Casey Ellis was cited as supporting the policy initiative, emphasizing the importance of structured bug disclosure channels for government entities.
Press
A ZDNet article reports on CISA's addition of a Microsoft Win32k privilege escalation vulnerability to its list of known exploited bugs requiring federal agency patching. Casey Ellis commented on the vulnerability's severity and the importance of timely remediation for affected systems.
Press
The Telegraph published a feature article examining how corporations pay large sums to ethical hackers, including teenagers, through bug bounty programs to identify security vulnerabilities. Casey Ellis is cited as a key figure in legitimizing and scaling this practice through his work in the bug bounty space.
Press
SC Media reported on the discovery of multiple vulnerabilities in 42Gears' SureMDM platform that could have enabled supply chain attacks against its customers. Casey Ellis contributed analysis of the security findings and their potential impact on enterprise mobile device management deployments.
Press
A Dice article examines why ransomware continues to rank as a critical concern for IT and security professionals due to its potential for widespread disruption and financial damage. Casey Ellis discusses the persistent threat ransomware poses to organizations and the strategies security teams employ to defend against evolving attack methods.
Press
A Security Boulevard article from January 2022 examines the rise in vulnerability disclosure programs driven by U.S. federal requirements and CISA directives. Casey Ellis comments on how federal mandates are prompting organizations to establish clearer processes for receiving and managing vulnerability reports.
Press
The Cyber Wire's Privacy Briefing for January 19, 2022, covers data breaches, ransomware threats across sectors, and vulnerability trends. Casey Ellis contributed to a Bugcrowd report highlighting a significant rise in serious vulnerabilities targeting the financial sector.
Press
A ZDNet press article reports on Bugcrowd's findings of a 185% increase in high-risk vulnerabilities discovered in the financial services industry during 2021. Casey Ellis, Bugcrowd's founder and chief technology officer, provided analysis and commentary on the security trends and implications for financial sector organizations.
Press
A Bugcrowd press release published on PR Newswire reported a 185% increase in high-risk vulnerabilities discovered in the financial sector during a specific reporting period. Casey Ellis, Bugcrowd founder and CTO, commented on the findings and their implications for financial services security practices.
Press
Security Magazine published a Bugcrowd report documenting a 185 percent increase in critical vulnerabilities across the financial sector during a period of rapid digital transformation. The report attributes the spike to accelerated technology adoption and identifies gaps in vulnerability management practices among financial institutions.
Press
SiliconANGLE published Bugcrowd research showing that financial services companies experienced a 185% increase in high-risk vulnerability submissions during a specific period. Casey Ellis, Bugcrowd's founder and CTO, contributed analysis on the escalated threat landscape and what these findings reveal about security vulnerabilities in the financial sector.
Press
Dark Reading published analysis of Bugcrowd data showing a tenfold increase in vulnerability submissions from U.S.-based hackers, indicating growth in the domestic bug hunting community. The report reflects trends Casey Ellis and Bugcrowd have tracked in coordinated vulnerability disclosure and the expanding participation of security researchers in formal bug bounty programs.
Press
Bugcrowd released a report via Response Source documenting a 185% increase in high-risk vulnerabilities discovered within the financial sector. Casey Ellis, as Bugcrowd's founder and CTO, contributed to the analysis of vulnerability trends affecting financial institutions based on the company's crowdsourced security research platform.
Press
Data Center Knowledge published an article on the Log4Shell vulnerability and its exposure of software supply chain security gaps. Casey Ellis comments on how the incident underscores the need for better visibility and collaboration across open-source ecosystems to address systemic risks.
Press
Popular Science published an explainer on bug bounty programs, how they operate, and their role in cybersecurity. Casey Ellis is quoted discussing why organizations use bounties to find vulnerabilities and the economic incentives that drive security researchers to participate.
Press
The Street published an article on biometric technology adoption at sports and entertainment venues for ticketing, payments, and personalized experiences. Casey Ellis is cited discussing security implications and best practices for implementing biometric systems at large public events.
Press
Fortune reported on more than 80 CFOs pushing back against new SEC sustainability reporting rules. Casey Ellis was among the signatories raising concerns about the proposed regulatory requirements and their operational impact.
Press
BankInfoSecurity reported on a critical remote code execution vulnerability discovered in the H2 database console that shares architectural similarities with the Log4Shell flaw. The report detailed how the vulnerability in H2's console component could enable attackers to execute arbitrary code remotely, drawing comparisons to the widespread Log4Shell incident that had recently affected numerous organizations.
Press
ZDNet published a January 2022 article covering JFrog researchers' discovery of a critical JNDI vulnerability in H2 database consoles comparable to Log4Shell. Casey Ellis contributed analysis on the vulnerability's significance and broader security implications for enterprise database environments.
Press
Protocol published an article examining six critical security flaws discovered in Microsoft Azure over the previous year and their implications for cloud platform security. Casey Ellis commented on the vulnerabilities and Microsoft's responsibility to address the systemic challenges underlying these discoveries.